189 Commits

Author SHA1 Message Date
Toni de la Fuente 0ea9de8f64 Merge pull request #80 from toniblyx/master
Update README.md
1.3
2017-07-18 13:01:54 -04:00
Toni de la Fuente 5723bcb1a4 Update README.md 2017-07-18 13:00:46 -04:00
Toni de la Fuente 222ab4d8d6 Merge pull request #79 from toniblyx/master
Add TOC and section about Extras
2017-07-18 12:33:10 -04:00
Toni de la Fuente f949d2f588 Add TOC and section about extras 2017-07-18 12:32:16 -04:00
Toni de la Fuente 918f74d6c5 Merge pull request #78 from toniblyx/master
Added check73 to find S3 buckets open to AllUsers
2017-07-18 11:49:01 -04:00
Toni de la Fuente 2faa50c4de fixed typo in TITTLE73 2017-07-18 11:47:56 -04:00
Toni de la Fuente ae274b2fc9 Added check73 S3 buckets open to the AllUsers 2017-07-18 11:45:52 -04:00
Toni de la Fuente 6f5b28a99c Merge pull request #77 from Alfresco/revert-76-revert-75-master
Revert "Revert "added check72 about EBS snapshots set as public""
2017-07-18 09:32:45 -04:00
Toni de la Fuente ce9a2b8162 Revert "Revert "added check72 about EBS snapshots set as public"" 2017-07-18 09:32:23 -04:00
Toni de la Fuente 92598d54f5 Merge pull request #76 from Alfresco/revert-75-master
Revert "added check72 about EBS snapshots set as public"
2017-07-18 09:30:44 -04:00
Toni de la Fuente 1697d6c92a Revert "added check72 about EBS snapshots set as public" 2017-07-18 09:30:31 -04:00
Toni de la Fuente f64607d925 Merge pull request #75 from toniblyx/master
added check72 about EBS snapshots set as public
2017-07-18 09:16:24 -04:00
Toni de la Fuente 255b6f4ccb Added extra check72
7.2  Ensure there are no EBS Snapshots set as Public (Not Scored) (Not part of CIS benchmark)
2017-07-18 09:15:31 -04:00
Toni de la Fuente 7e3b1bd3ca Merge pull request #7 from Alfresco/master
get changes
2017-07-17 23:10:35 -04:00
Toni de la Fuente 93d5d7295f Merge pull request #73 from MrSecure/extra71-admins
add extra check - look for admins w/o MFA
2017-07-17 23:08:45 -04:00
Toni de la Fuente 435d2ed6fc Merge pull request #72 from MrSecure/check315-fixes
update check315
2017-07-17 22:55:01 -04:00
Ben Allen bb1cb1e081 add extra71 check 2017-07-17 21:43:43 -05:00
Ben Allen 1527e438a1 update check315 to provide more consistent display of topics & subscriptiongs 2017-07-17 21:42:18 -05:00
Toni de la Fuente c2b5ed17c2 Merge pull request #71 from toniblyx/master
fixed issue with check 3.15 issue #70
2017-07-17 22:28:02 -04:00
Toni de la Fuente c2540b2828 fixed issue with check 3.15 2017-07-17 22:27:12 -04:00
Toni de la Fuente fe4dfdb368 Merge pull request #68 from toniblyx/master
Added checks based on CIS profile definitions, issue #64
2017-07-17 21:21:54 -04:00
Toni de la Fuente 39f1411f30 added info about profile definitions 2017-07-17 21:20:05 -04:00
Toni de la Fuente ebf80a6455 Added CIS profile definitions checks
level1 and level2 profile definition checks enabled see https://github.com/Alfresco/prowler/issues/64
2017-07-17 21:14:46 -04:00
Toni de la Fuente ebeb747686 Merge pull request #67 from toniblyx/master
issue #65
2017-07-17 20:50:40 -04:00
Toni de la Fuente e3400b05ba fixed issue #65
added --output json to those places needed to override different default configuration
2017-07-17 20:49:19 -04:00
Toni de la Fuente 90b24ef734 Merge pull request #6 from Alfresco/master
get latest updates
2017-07-13 09:58:07 -04:00
Toni de la Fuente 2de0b5e6b0 Merge pull request #62 from MrSecure/keep-cred-report
Keep cred report
1.2
2017-07-12 11:57:21 -04:00
Ben Allen 2ddf31ca22 Merge in tweaks to keep the credential report, when requested, and fix a notice 2017-07-12 10:34:55 -05:00
Ben Allen b8d2d1cd4b Merge branch 'policy_requirements' into all-updates 2017-07-12 10:32:06 -05:00
Toni de la Fuente fb420d13cc Merge pull request #61 from MrSecure/policy_requirements
Policy requirements
2017-07-12 11:24:18 -04:00
Toni de la Fuente 55ed1273d9 Merge pull request #60 from MrSecure/fail-early
Fail early
2017-07-12 11:15:35 -04:00
Ben Allen edceb17b71 Merge branch 'fail-early' into all-updates 2017-07-12 10:13:07 -05:00
Ben Allen a1e3c09fad Merge branch 'fail-early' into all-updates 2017-07-12 10:06:39 -05:00
Ben Allen 118da69eb5 add headings for incremental policy and bootstrap script 2017-07-11 16:34:25 -05:00
Ben Allen 02a4ab665f fix policy document syntax error in README 2017-07-11 16:34:25 -05:00
Ben Allen c8a2e16a1c add note about saving the key material 2017-07-11 16:34:25 -05:00
Ben Allen ca012ebf76 fix policy document syntax error 2017-07-11 16:34:25 -05:00
Ben Allen 1cbedb1eb6 add incremental policy file; update readme to show use case 2017-07-11 16:34:25 -05:00
Ben Allen 30c3a8aa76 correct typo in permission name 2017-07-11 16:34:25 -05:00
Ben Allen 68f8e08506 add option (-k) to keep the credential report after execution. 2017-07-11 16:24:42 -05:00
Ben Allen 866fe11610 fix typo in function name 2017-07-11 16:23:50 -05:00
Ben Allen f787c57636 improve trap handling 2017-07-11 16:04:27 -05:00
Ben Allen 93b815ecf2 gather count of topics per region, even when unable to list subscribers. 2017-07-11 15:58:50 -05:00
Ben Allen fe99890683 swallow error message for list-subscriptions-by-topic 2017-07-11 15:58:42 -05:00
Ben Allen 9ef23aecca handle permission failure on list-subscriptions-by-topic gracefully 2017-07-11 15:58:34 -05:00
Ben Allen 043fa32aef exit script if there are problems with the credentials. 2017-07-11 15:58:21 -05:00
Ben Allen 5bdd5d8e54 add account number to CSV output. 2017-07-11 15:57:33 -05:00
Ben Allen df47f94cf9 change name of temp file so that it's random
Allows multiple instances of prowler to run in parallel (eg. via xargs
-P ).
Also, add trap handler to remove temp file if interrupted.
2017-07-11 15:57:33 -05:00
Ben Allen 7b6f168d8c update output for check 1.22 to handle multiple users 2017-07-11 15:57:16 -05:00
Ben Allen cf9a73d539 gather count of topics per region, even when unable to list subscribers. 2017-07-11 15:52:21 -05:00